v0.26.16 — TeamMember privacy defaults
v0.26.16 is a patch release that hardens TeamMember privacy defaults
so derived projects do not commit ambient human identity data by default.
Changed
- Human TeamMember creation and update now store repo-visible identity as
alias-only metadata by default: the committed display name is the slug,
andemail/handleare dropped unless the caller explicitly passes
allow_committed_pii=true. - The human TeamMember template now uses a generic
human-useralias,
disables memory and export by default, and omits personal contact
placeholders. - Team-manager guidance now states that humans must not be auto-created
from ambient host, git, or harness identity.
Fixed
- Added a
team.privacy.committed_piiconsistency warning, surfaced
through pk-doctor'steam_consistencycategory, for legacy human
TeamMembers that still contain repo-visible personal identity fields
without explicit opt-in.
Verification
python3 -m py_compile context/skills/processkit/team-manager/mcp/server.py context/skills/processkit/team-manager/scripts/consistency.py context/skills/processkit/pk-doctor/scripts/checks/team_consistency.pyuv run --with pyyaml --with jsonschema --with pytest --with mcp pytest context/skills/processkit/team-manager/scripts/test_team_manager.py -quv run --with pyyaml --with jsonschema --with pytest --with mcp pytest src/context/skills/processkit/team-manager/scripts/test_team_manager.py -quv run context/skills/processkit/pk-doctor/scripts/doctor.py --category=team_consistencybash scripts/check-src-context-drift.sh --release-deliverable